How to protect yourself using public Wifi on your Android Phone?

[mindstormer]

I recently learned that it is incredibly easy for someone to access your Facebook or any sites you log in to if you don't use HTTPS of the site. On PC, I think I read that page that is not HTTPS that you are logged in to that someone can access it. HTTPS Everywhere solves this on the PC (though I have no idea how it works... can't browsers just have a built-in HTTPS "everywhere" feature?).

What about on an Android phone? How can I make it so that it is safe to access my Gmail, Facebook, cloud storage, Amazon account, etc. at places like school or restaurants?

Thanks.

 

[Slug]

How can I make it so that it is safe [...]

If the endpoint server doesn't implement HTTPS, then the surest way is to always use an encrypted VPN connection when using unsecured public access points.

Btw, according to the EFF page for HTTPS Everywhere,

HTTPS Everywhere can protect you only when you're using sites that support HTTPS and for which HTTPS Everywhere include a ruleset.

So it's not a failsafe solution by any means.

 

[mindstormer]

Is using an encrypted VPN connection slower? What are the cons of it? Do people use an encrypted VPN connection for the sole ability to access sensitive sites like online banking or is encrypted VPN connection something that should always be used for anything outside of home?

 

[Slug]

Is using an encrypted VPN connection slower?

If it is I doubt it's noticeable to the human eye.

What are the cons of it?

It requires a separate VPN supplier/provider, which may or may not entail a subscription fee. The user also has to remember to use the VPN connection..

Do people use an encrypted VPN connection for the sole ability to access sensitive sites like online banking or is encrypted VPN connection something that should always be used for anything outside of home?

I guess that depends on the individual. I only felt the need when I was using online banking, and when I stopped doing that from my handset decided that I no longer required it. I very rarely use unsecured wifi APs anyway as most of my time is spent either at home or work.

 

[SiempreTuna]

I think the best thing is to be sensible about what you do on public WiFi. If you're logging onto anything, ensure the page is using HTTPS before entering any credentials .. better yet, avoid logging into anything